<!DOCTYPE html>
<meta charset="utf-8">
<meta name="timeout" content="long">
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/cookies/resources/cookie-helper.sub.js"></script>
<script>
  function schemeful_navigation_test(target, expectedSameSiteStatus, title) {
    promise_test(async function(t) {
      let value = "" + Math.random();
      document.cookie = `samesite_strict=${value}; sameSite=strict; path=/`;
      document.cookie = `samesite_lax=${value}; sameSite=lax; path=/`;

      let url = target + "/cookies/schemeful-same-site/resources/navigateToInsecurePostToParent.html";

      await new Promise((resolve, reject) => {
          window.onmessage = t.step_func(e => {
            if (e.source == window.open("", "testwindow" + value)) {
              e.source.close();
              const cookies = e.data;

              assert_equals(cookies["samesite_lax"], value, "SameSite=lax cookies can be sent in both cases");
              if (expectedSameSiteStatus === SameSiteStatus.STRICT) {
                assert_equals(cookies["samesite_strict"], value, "SameSite=strict cookies can be sent to same-scheme navigations");
              } else if (expectedSameSiteStatus === SameSiteStatus.LAX) {
                assert_not_equals(cookies["samesite_strict"], value, "SameSite=strict cookies cannot be sent to cross-scheme navigations");
              }

              resolve();
            }
            else {reject();}
          });

          var w = window.open(url, "testwindow" + value);
        });

    },title);}

  schemeful_navigation_test(INSECURE_ORIGIN, SameSiteStatus.STRICT, "Navigate same-scheme");
  schemeful_navigation_test(SECURE_ORIGIN, SameSiteStatus.LAX, "Navigate cross-scheme");
</script>
